---
title: "Generate Guest Token"
method: POST
path: "/spaces/guest-token"
tags: ["SPACES"]
---

# Generate Guest Token

`POST /spaces/guest-token`

## Request

- Base URL: `https://api.myaltimate.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.myaltimate.com/spaces/guest-token`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

Mint a Superset guest token for one dashboard the tenant owns.

The ownership check below is the embed trust boundary: the UUID comes
from the browser and must never be trusted as-is. A token is minted only
when the dashboard row exists in the caller's tenant schema with
``provider='superset'``.

## Request body

- SpacesGuestTokenRequest
  - `embed_uuid` string, required: Superset dashboard embed UUID (spaces_dashboard.embed_uuid)

## Response `200`

Successful Response

- SpacesGuestTokenResponse
  - `token` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/myaltimate/apis/myaltimate-api.md) - [All operations](https://skmtc.dev/myaltimate/apis/myaltimate-api/llms.txt) - [OpenAPI document](https://skmtc.dev/myaltimate/apis/myaltimate-api/revisions/727657ce54e9?raw)